This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/Y8GAhpOcUIyfO0CyQe49bNXAI8k.roa File: Y8GAhpOcUIyfO0CyQe49bNXAI8k.roa (raw, json) Hash identifier: 49fIprccRJUVDzFPqcsAmiCiqNfTbqtbpr/g64iaVzQ= Subject key identifier: 63:C1:80:86:93:9C:50:8C:9F:3B:40:B2:41:EE:3D:6C:D5:C0:23:C9 Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Certificate serial: 019B7AC7C990018FB358411C7F8E9F8D3257 Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/Y8GAhpOcUIyfO0CyQe49bNXAI8k.roa Signing time: Thu 01 Jan 2026 18:17:52 +0000 ROA not before: Thu 01 Jan 2026 18:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35251 IP address blocks: 45.138.68.0/24 maxlen: 24 45.138.69.0/24 maxlen: 24 45.138.70.0/24 maxlen: 24 45.138.71.0/24 maxlen: 24 45.158.20.0/24 maxlen: 24 45.158.21.0/24 maxlen: 24 45.158.22.0/24 maxlen: 24 45.158.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:c9:90:01:8f:b3:58:41:1c:7f:8e:9f:8d:32:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Validity Not Before: Jan 1 18:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63c18086939c508c9f3b40b241ee3d6cd5c023c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9e:29:e4:da:41:39:9f:90:ae:43:3e:9d:64: 8c:dd:1e:c1:c5:e5:10:eb:e9:05:50:ad:01:a7:79: 5d:a4:13:1e:91:38:2f:77:ac:c0:bb:fd:ee:d6:0f: b1:b9:5c:12:c5:1e:03:cd:d1:26:ff:14:6e:e4:3f: be:df:83:d9:3e:ab:40:7e:20:ac:32:71:43:fd:1b: b3:a1:5d:01:ce:e2:87:d3:11:43:77:26:7d:c8:27: 63:f9:dd:e6:fc:22:34:df:aa:18:73:b9:b0:63:f6: 0b:74:f1:f0:6f:c4:da:2a:54:91:59:37:f4:01:7d: 7e:a2:59:43:53:38:27:aa:8f:25:c0:d9:fd:dd:0c: 02:bf:f4:43:c4:ec:8d:ca:c5:b0:d0:b6:03:af:db: 0f:af:17:77:80:56:01:34:89:b6:26:a0:4a:e2:8e: f0:2e:db:e7:99:f9:69:e2:c9:2a:42:57:b3:33:d7: e1:8b:43:1a:fe:e4:98:63:67:47:64:73:02:a8:a4: b8:7d:5b:dd:58:3d:c4:3c:ad:70:1f:c5:f0:93:c5: 79:c1:7c:f2:93:48:dd:f4:a1:6f:22:b8:d8:39:be: 0f:ab:0b:1a:e5:c7:17:44:44:8d:f5:65:50:a6:b6: 6f:ff:fe:61:93:65:d3:84:e4:14:fb:9a:60:99:9b: 9f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C1:80:86:93:9C:50:8C:9F:3B:40:B2:41:EE:3D:6C:D5:C0:23:C9 X509v3 Authority Key Identifier: keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/Y8GAhpOcUIyfO0CyQe49bNXAI8k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.138.68.0/22 45.158.20.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:f8:13:9e:cc:35:3f:9e:bd:99:60:5a:1c:fc:53:f8:e5:42: ba:66:07:6e:fd:52:49:5c:cf:a7:94:cc:80:41:17:ae:c5:70: dc:33:65:6c:6f:85:95:64:5d:67:9d:e0:e8:f1:49:66:b0:9e: 5c:df:37:0e:9f:cc:4e:2c:51:d2:bf:a4:f6:f5:17:58:f4:27: 59:03:cb:54:0b:be:e8:a6:70:55:de:9f:8f:58:62:ee:d6:94: a8:97:35:21:3a:78:7b:ed:51:91:1a:d2:41:68:64:0e:17:ab: 05:d2:8f:70:58:fe:5e:36:83:0c:c3:22:4d:a1:ac:52:1b:28: 02:c8:e9:3c:d1:8b:fb:d8:7a:be:f7:a7:64:db:87:bc:ca:bb: 4b:e8:d1:e1:bd:fc:9d:b1:4a:1f:46:1e:0f:90:b4:43:88:3c: be:a0:38:58:5c:f4:75:52:90:47:db:ec:ec:d4:e8:d3:ce:33: e1:fd:a5:8b:0e:6e:66:6a:9d:e5:27:25:43:25:6a:e1:12:76: b1:30:2e:4d:7c:12:d0:a8:7f:91:1c:b9:5a:3a:6a:c4:5e:ff: 11:fd:ba:02:f4:87:da:bc:3e:fe:50:86:8a:67:e0:ba:c4:b4: 8e:51:73:cf:ee:75:5e:00:a4:ce:6d:ee:a4:ab:db:3f:df:bb: 18:ea:b8:54 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6x8mQAY+zWEEcf46fjTJXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1 YTYyNDQwHhcNMjYwMTAxMTgxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2MxODA4NjkzOWM1MDhjOWYzYjQwYjI0MWVlM2Q2Y2Q1YzAyM2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt54p5NpBOZ+QrkM+nWSM3R7BxeUQ 6+kFUK0Bp3ldpBMekTgvd6zAu/3u1g+xuVwSxR4DzdEm/xRu5D++34PZPqtAfiCs MnFD/RuzoV0BzuKH0xFDdyZ9yCdj+d3m/CI036oYc7mwY/YLdPHwb8TaKlSRWTf0 AX1+ollDUzgnqo8lwNn93QwCv/RDxOyNysWw0LYDr9sPrxd3gFYBNIm2JqBK4o7w Ltvnmflp4skqQlezM9fhi0Ma/uSYY2dHZHMCqKS4fVvdWD3EPK1wH8Xwk8V5wXzy k0jd9KFvIrjYOb4Pqwsa5ccXRESN9WVQprZv//5hk2XThOQU+5pgmZufZQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGPBgIaTnFCMnztAskHuPWzVwCPJMB8GA1UdIwQY MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt MDg1MmNiMzUzMjkzLzEvWThHQWhwT2NVSXlmTzBDeVFlNDliTlhBSThrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLYpEAwQC LZ4UMA0GCSqGSIb3DQEBCwUAA4IBAQAe+BOezDU/nr2ZYFoc/FP45UK6Zgdu/VJJ XM+nlMyAQReuxXDcM2Vsb4WVZF1nneDo8UlmsJ5c3zcOn8xOLFHSv6T29RdY9CdZ A8tUC77opnBV3p+PWGLu1pSolzUhOnh77VGRGtJBaGQOF6sF0o9wWP5eNoMMwyJN oaxSGygCyOk80Yv72Hq+96dk24e8yrtL6NHhvfydsUofRh4PkLRDiDy+oDhYXPR1 UpBH2+zs1OjTzjPh/aWLDm5map3lJyVDJWrhEnaxMC5NfBLQqH+RHLlaOmrEXv8R /boC9IfavD7+UIaKZ+C6xLSOUXPP7nVeAKTObe6kq9s/37sY6rhU -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:47 2026 by rpki-client